Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18084

All 18084 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-31706 ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() 8.8 High 2026-05-01
CVE-2026-31707 ksmbd: validate response sizes in ipc_validate_msg() 7.1 High 2026-05-01
CVE-2026-31705 ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment 9.8 Critical 2026-05-01
CVE-2026-31704 ksmbd: use check_add_overflow() to prevent u16 DACL size overflow 8.4 - 2026-05-01
CVE-2026-31702 f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() 7.1 - 2026-05-01
CVE-2026-31703 writeback: Fix use after free in inode_switch_wbs_work_fn() 7.8 High 2026-05-01
CVE-2026-31701 ALSA: caiaq: take a reference on the USB device in create_card() 7.1 - 2026-05-01
CVE-2026-31700 net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() 7.8 High 2026-05-01
CVE-2026-31699 crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed 7.1 High 2026-05-01
CVE-2026-31698 crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed 7.1 High 2026-05-01
CVE-2026-31697 crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed 7.1 High 2026-05-01
CVE-2026-31696 rxrpc: Fix missing validation of ticket length in non-XDR key preparsing 7.8 - 2026-05-01
CVE-2026-31695 wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free 7.8 High 2026-05-01
CVE-2026-31694 fuse: reject oversized dirents in page cache 7.8 High 2026-05-01
CVE-2026-31693 cifs: some missing initializations on replay 7.8 High 2026-04-30
CVE-2026-31692 rtnetlink: add missing netlink_ns_capable() check for peer netns 7.1 - 2026-04-30
CVE-2026-31787 xen/privcmd: fix double free via VMA splitting 7.1 - 2026-04-30
CVE-2026-31786 Buffer overflow in drivers/xen/sys-hypervisor.c 7.8 High 2026-04-30
CVE-2026-31691 igb: remove napi_synchronize() in igb_down() 7.1 - 2026-04-27
CVE-2026-31690 firmware: thead: Fix buffer overflow and use standard endian macros 8.8AI High AI 2026-04-27
CVE-2026-31689 EDAC/mc: Fix error path ordering in edac_mc_alloc() 7.8 - 2026-04-27
CVE-2026-31687 gpio: omap: do not register driver in probe() 6.6AI Medium AI 2026-04-27
CVE-2026-31686 mm/kasan: fix double free for kasan pXds 7.1 - 2026-04-27
CVE-2026-31685 netfilter: ip6t_eui64: reject invalid MAC header for all packets 9.4 Critical 2026-04-25
CVE-2026-31684 net: sched: act_csum: validate nested VLAN headers 7.3AI High AI 2026-04-25
CVE-2026-31683 batman-adv: avoid OGM aggregation when skb tailroom is insufficient 7.8 High 2026-04-25
CVE-2026-31682 bridge: br_nd_send: linearize skb before parsing ND options 9.1 Critical 2026-04-25
CVE-2026-31681 netfilter: xt_multiport: validate range encoding in checkentry 7.1AI High AI 2026-04-25
CVE-2026-31680 net: ipv6: flowlabel: defer exclusive option free until RCU teardown 7.8 High 2026-04-25
CVE-2026-31679 openvswitch: validate MPLS set/set_masked payload length 7.1 High 2026-04-25

All 18084 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.